Privacy Policy

Last updated June 11, 2026

The short version

  • LeadSeed sets up ad-conversion tracking — analytics, tag management, and a simple lead store — inside your own accounts.
  • We collect the basics needed to run your account: your email, your business name and website, and what you do in the app.
  • With your permission, we connect to your Google account to create and manage these resources for you. We only use that access to set up and maintain your tracking — never for advertising, and we never sell it.
  • Your leads don’t pass through us. When someone fills out a form on your site, that data goes straight to the destination you control.
  • You can ask us to show, correct, or delete your data anytime, and you can disconnect Google whenever you like.

1. Who we are and what this policy covers

LeadSeed is a product operated by Performlytics Inc.(“Performlytics,” “we,” “us,” “our”), a company based in Ontario, Canada. This Privacy Policy explains what personal information we collect through the LeadSeed website at myleadseed.comand the LeadSeed application (together, the “Service”), how we use it, who we share it with, and the rights and choices you have. LeadSeed is a business tool; we collect information from the business owners and team members who use it. By using the Service, you agree to this policy. If you don’t agree, please don’t use the Service.

2. Information we collect

Information you give us.When you use LeadSeed we collect: your email address (to create your account and sign you in); your business name and website address; any notes or edits you make to your tracking plan; and, if your site isn’t yet eligible for LeadSeed, an email address you choose to give us to join our waitlist.

Information we collect automatically.When you use the Service we collect a limited amount of technical information: a one-way hashed version of your IP address (used only to prevent abuse and rate-limit requests — we do not retain your raw IP address in our application records); basic device and browser information; and product-analytics events describing how you move through the app (for example, which setup step you’re on and whether it succeeded). These analytics events are linked to a random identifier, not to your name or email.

Information from accounts you connect. If you choose to connect a Google account, we receive certain information from Google as described in the next section.

3. Google user data: what we access and why

When you connect your Google account, you grant LeadSeed permission to specific Google services so we can set up your tracking for you. We request the narrowest set of permissions needed to do that:

  • Read the list of your analytics and tag-management accounts — so you can choose which one we should set things up in.
  • Create and manage analytics resources (an analytics property, a web data stream, and conversion events) on your behalf.
  • Read your Google Analytics data — specifically, we read the real-time report to confirm that a test event we send actually reaches your analytics, so we can verify your tracking is working end to end.
  • Create, edit, and publish tag-management resources (a container, its tags and triggers, and a published version) on your behalf.
  • Create files that LeadSeed itself creates in your Google Drive — used to set up a simple lead spreadsheet. This permission is limited to files we create; we cannot see your other Drive files.
  • Upload conversion events to your own Google Ads account— when a lead you mark as won becomes a paying customer, we send that conversion to your Google Ads account so your ad campaigns can optimize for real customers, not just clicks. We send only the anonymous click identifiers that Google attaches to an ad click (such as gclid, wbraid, or gbraid) together with a conversion value and timestamp. We never send your customers’ names, email addresses, or phone numbers, and we only send conversions you have chosen to track.
  • Your basic Google identity (your email address and a Google account identifier) — only to label the connection in the app and to recognize if you later reconnect with a different account.

What we do with this access

  • Create and configure analytics and tag-management resources inside your own accounts.
  • Securely store a single connection token so your tracking keeps working without asking you to sign in to Google every time.
  • Store the identifiers of the resources we created (such as a property ID or container ID) so we can manage and verify them.
  • Read your GA4 real-time report to confirm a test event we generate reaches your analytics — this is how we verify your tracking is live.
  • Upload offline conversion events — anonymous ad-click identifiers plus a value and timestamp — to your own Google Ads account, so your campaigns can optimize for the leads that turn into paying customers.

What we never do

  • We never read your historical analytics data, reports, or audiences, and we never use your analytics data for advertising or for any purpose beyond confirming your tracking works.
  • We never read your existing containers, tags, or any Drive files other than the ones LeadSeed creates.
  • When we upload conversions to your Google Ads account, we never include your customers’ personal data — no names, email addresses, or phone numbers, only the anonymous ad-click identifiers Google itself attaches to a click. We upload only into your own account and only the conversions you choose to track.
  • We never use Google user data for our own advertising, retargeting, or building advertising profiles, and we never share it with any other advertiser.
  • We never sell or rent Google user data.
  • We never use Google user data to train generalized or non-personalized artificial- intelligence or machine-learning models.
  • We never allow humans to read your Google user data except with your explicit consent, where necessary for security or to comply with the law, or in limited aggregated form for internal operations such as debugging.

Limited Use.LeadSeed's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

4. How we use your information

We use the information we collect to: provide, operate, and maintain the Service (set up and keep your tracking working); authenticate you and keep your account secure through passwordless sign-in; communicate with you about your account, including service and security notices; understand and improve how the Service is used through privacy-preserving product analytics; detect, prevent, and address abuse, fraud, and technical problems; and comply with our legal obligations and enforce our Terms. Where the GDPR applies, our legal bases are performance of our contract with you, our legitimate interests in operating and improving the Service, your consent (where required, such as for non-essential cookies), and compliance with legal obligations.

5. Automated classification of your website

To tell you quickly whether LeadSeed can help and to pre-fill your setup, we send the public content of the website address you enter — such as the page title and visible page text — to a third-party AI content-classification provider that detects your industry and website platform. We only send content that is already publicly available on your site. We do not send your Google user data to this provider, and this content is not used by us or the provider to train generalized AI models.

6. How we share information

We do not sell your personal information. We share it only as described here:

  • Service providers (sub-processors). We rely on a small number of vetted providers to run the Service. They may process your information only on our instructions and only to provide their service to us. By category, they are: a cloud hosting and content-delivery provider; a database and authentication provider; a product-analytics platform; an error-monitoring service; a transactional-email provider; an AI content-classification provider; and a background-job engine.
  • Accounts you connect. We act within the Google (and, in future, other) accounts you connect, at your direction, to provide the Service.
  • Legal and safety. We may disclose information if required by law, regulation, or legal process, or to protect the rights, property, safety, or security of our users, the public, or LeadSeed.
  • Business transfers.If we’re involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction; we’ll notify you, and any successor will be bound by this policy.

7. Your customers' lead data

LeadSeed helps you set up a place to collect leads, but the lead information your own customers submit on your website — such as their name, email, or phone number — does not flow through LeadSeed’s servers. It goes directly from your website to the lead destination you control, such as your own CRM or spreadsheet. You are responsible for handling that lead data in line with applicable privacy laws and for providing any notices or obtaining any consents required on your own website.

8. Cookies and similar technologies

We keep cookie use minimal and use only first-party cookies needed to operate the Service: one that holds a random analytics identifier so we can measure product usage and improve the Service without using your name or email, and one that temporarily remembers an in-progress website analysis so you can pick up where you left off. We do not use third-party or advertising cookies, and we do not use cookies to track you across other websites. If we introduce non-essential cookies in the future, we will ask for your consent where the law requires it. You can clear cookies in your browser at any time.

9. How long we keep information

We keep your account information for as long as your account is active. If you run a website analysis but don’t create an account, we retain that analysis — and any waitlist email you gave us — only for as long as needed for the purpose you provided it, after which it is deleted. When you delete your account, your account data is deleted, and that deletion cascades to your stored connection tokens and the operational records tied to your account. We may retain limited information for longer where necessary to comply with the law, resolve disputes, or enforce our agreements. Abuse-prevention records, such as hashed rate-limit data, are short-lived and pruned automatically. You can request deletion at any time (see “Your rights and choices”).

10. How we protect your information

We take reasonable and appropriate measures to protect your information, including: encrypting connection tokens at rest using strong, authenticated encryption, and never logging them in plain text; storing IP addresses only as a one-way hash; isolating each customer’s data and restricting access to the server processes that need it; scrubbing sensitive values from our logs and error reports; and encrypting data in transit (HTTPS). No method of transmission or storage is completely secure, but we review our safeguards as the Service grows.

11. Your rights and choices

Depending on where you live — for example, Canada under PIPEDA, the EEA or UK under the GDPR, or California under the CCPA/CPRA — you may have some or all of these rights: to access the personal information we hold about you; to correct it; to delete it; to receive a copy in a portable format; to restrict or object to certain processing; and to withdraw consent. We do not sell your personal information or use it for cross-context behavioral advertising. To exercise any right, email privacy@myleadseed.com; we will verify your request and respond within the time the law requires, and you won’t be treated differently for exercising your rights. You can disconnect Google at any time from your Google Account’s security settings (under third-party access) or from within the app, and we will delete the stored connection token.

12. International data transfers

We are based in Canada, and our service providers may process your information in Canada, the United States, and other countries. Where we transfer personal data internationally, we rely on appropriate safeguards (such as standard contractual clauses) where required by law.

13. Children's privacy

The Service is intended for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

14. Third-party sites and services

The Service links to and integrates with third-party services, including the platforms you choose to connect. Their handling of your information is governed by their own privacy policies, not this one.

15. Changes to this policy

We may update this policy as the Service evolves or as the law changes. We’ll post the updated policy here with a new “Last updated” date, and for material changes that affect how we handle your data, we’ll provide prominent notice and, where required, ask for your consent.

16. Contact us

Performlytics Inc., the company behind LeadSeed, is the controller of your personal information. For privacy questions or requests, email privacy@myleadseed.com. We’re based in Ontario, Canada.